Analysis

  • max time kernel
    137s
  • max time network
    145s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241023-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    09-12-2024 23:33

General

  • Target

    dffdfffdd.jar

  • Size

    639KB

  • MD5

    c942ed6d51e0d64e9c59284c3cb39442

  • SHA1

    228d4d54b33af8ad41ca979eea12fb53e8cc22ec

  • SHA256

    3b662ed487b621b66bb21c4856259da0ed581c151f2b385ab13dff3eb8c12b94

  • SHA512

    3a5cc2269d16d9629c5a1f8dee16c4e0231d4a8b0c1186bfef7cbc84915f6351832bbe990e66ae35968fcb9d107f05a67077ba02373db9a74e51338ff7a23b0d

  • SSDEEP

    12288:ZL1qQo/QCEfqb4XWwqxngY/tRX+pw2NeF5go9SRC73aus29oSXzDM2:ZLIQkUfK4mDngY3ateF2W/auR9zXzDM2

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Temp\dffdfffdd.jar
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1564-2-0x00000181D44F0000-0x00000181D4760000-memory.dmp

    Filesize

    2.4MB

  • memory/1564-15-0x00000181D2BF0000-0x00000181D2BF1000-memory.dmp

    Filesize

    4KB

  • memory/1564-16-0x00000181D4760000-0x00000181D4770000-memory.dmp

    Filesize

    64KB

  • memory/1564-18-0x00000181D4770000-0x00000181D4780000-memory.dmp

    Filesize

    64KB

  • memory/1564-20-0x00000181D4780000-0x00000181D4790000-memory.dmp

    Filesize

    64KB

  • memory/1564-23-0x00000181D4790000-0x00000181D47A0000-memory.dmp

    Filesize

    64KB

  • memory/1564-24-0x00000181D47A0000-0x00000181D47B0000-memory.dmp

    Filesize

    64KB

  • memory/1564-26-0x00000181D47B0000-0x00000181D47C0000-memory.dmp

    Filesize

    64KB

  • memory/1564-28-0x00000181D47C0000-0x00000181D47D0000-memory.dmp

    Filesize

    64KB

  • memory/1564-30-0x00000181D47D0000-0x00000181D47E0000-memory.dmp

    Filesize

    64KB

  • memory/1564-33-0x00000181D2BF0000-0x00000181D2BF1000-memory.dmp

    Filesize

    4KB

  • memory/1564-34-0x00000181D44F0000-0x00000181D4760000-memory.dmp

    Filesize

    2.4MB

  • memory/1564-35-0x00000181D4760000-0x00000181D4770000-memory.dmp

    Filesize

    64KB

  • memory/1564-37-0x00000181D4770000-0x00000181D4780000-memory.dmp

    Filesize

    64KB

  • memory/1564-38-0x00000181D4780000-0x00000181D4790000-memory.dmp

    Filesize

    64KB

  • memory/1564-39-0x00000181D4790000-0x00000181D47A0000-memory.dmp

    Filesize

    64KB

  • memory/1564-40-0x00000181D47A0000-0x00000181D47B0000-memory.dmp

    Filesize

    64KB

  • memory/1564-41-0x00000181D47B0000-0x00000181D47C0000-memory.dmp

    Filesize

    64KB

  • memory/1564-42-0x00000181D47C0000-0x00000181D47D0000-memory.dmp

    Filesize

    64KB

  • memory/1564-43-0x00000181D47D0000-0x00000181D47E0000-memory.dmp

    Filesize

    64KB

  • memory/1564-46-0x00000181D47E0000-0x00000181D47F0000-memory.dmp

    Filesize

    64KB

  • memory/1564-47-0x00000181D2BF0000-0x00000181D2BF1000-memory.dmp

    Filesize

    4KB

  • memory/1564-48-0x00000181D47E0000-0x00000181D47F0000-memory.dmp

    Filesize

    64KB